Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61135.roa
File: AS61135.roa (raw, json)
Hash identifier: yzVISgofxOa/Y7A4yGIYxN0koDholFDN1uOSom87lU8=
Subject key identifier: 86:6B:71:2F:99:45:CF:EE:60:1A:18:35:D2:1F:47:7B:4A:BF:C5:82
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3827752CBEEE34DDCA54F47EE256107211A23C93
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61135.roa
Signing time: Thu 18 Jan 2024 00:00:06 +0000
ROA not before: Wed 17 Jan 2024 23:55:06 +0000
ROA not after: Thu 16 Jan 2025 00:00:06 +0000
asID: 61135
IP address blocks: 45.154.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:27:75:2c:be:ee:34:dd:ca:54:f4:7e:e2:56:10:72:11:a2:3c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 17 23:55:06 2024 GMT
Not After : Jan 16 00:00:06 2025 GMT
Subject: CN=866B712F9945CFEE601A1835D21F477B4ABFC582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:83:aa:98:5d:72:75:78:00:7b:c2:ee:ba:
c1:57:02:2b:6e:7b:2c:55:b8:86:43:42:e2:5f:79:
31:39:ca:cc:3f:5c:4f:3f:cf:c0:d7:8d:c8:c6:86:
ac:32:6c:d8:85:ad:be:b2:04:e8:a3:1e:ac:f6:d8:
81:a8:d7:65:26:f7:5b:14:a7:67:1c:3f:1f:2c:b1:
29:76:c4:68:84:5c:22:eb:95:52:6c:35:62:20:ef:
2f:49:88:3a:7f:60:9f:5b:31:a9:52:ad:81:bc:9b:
9f:2d:a3:76:ad:af:11:3d:e6:3e:45:1e:00:30:35:
d8:e7:1a:d7:2f:3e:8f:94:2d:c0:7a:52:25:70:67:
1d:5f:8e:43:42:5e:a5:ee:10:7c:52:4e:9a:69:d8:
33:04:ed:fe:0d:0e:61:f3:27:c0:42:1c:fb:5a:ed:
95:91:e5:45:07:46:93:bd:46:01:51:26:e4:24:2e:
41:26:d4:b3:16:88:78:4e:e0:b4:7b:21:c6:08:b9:
16:ab:5e:b8:4b:e9:93:94:f8:23:74:a3:26:c8:94:
49:5e:49:11:52:f0:e6:37:3f:7a:e7:d1:41:b6:e8:
e0:e9:16:f4:f1:31:93:2e:e3:8f:b8:1c:62:71:46:
ce:1f:af:09:30:3c:ac:0a:b4:c9:69:58:57:7b:03:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:71:2F:99:45:CF:EE:60:1A:18:35:D2:1F:47:7B:4A:BF:C5:82
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.104.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ae:58:a1:9c:d8:21:fc:d9:76:b2:e7:8e:05:4b:3c:3c:54:
34:cc:8d:dc:05:0d:ce:af:09:e6:83:fd:68:45:98:09:31:a3:
19:44:e5:5b:f9:95:76:30:9a:12:65:6c:ac:35:f7:c9:a5:f4:
b7:37:16:bc:c1:16:26:f9:11:bb:1a:13:be:f4:43:05:3e:e1:
44:a1:06:e9:06:bb:96:c1:0c:b7:84:a1:2d:57:c0:75:1f:52:
d5:88:66:04:9a:79:30:b6:e1:25:3f:15:a4:19:2a:24:d4:5c:
41:c7:14:52:f6:c0:a7:c7:e4:60:44:1d:d1:e2:d1:4b:c5:64:
76:7c:7e:0a:fa:29:eb:bc:7f:61:c2:db:db:8f:ad:25:df:6e:
53:4d:3d:9e:59:68:33:46:7e:5b:53:e1:2b:aa:d0:19:7c:e4:
65:c0:87:2f:91:66:04:d8:af:2e:e1:06:6f:41:d7:9f:0b:dd:
d0:56:ff:78:66:b3:6f:80:63:3d:69:0f:13:dc:77:f0:f0:cf:
b4:ee:9f:ee:9f:8e:29:f4:9d:a6:ef:92:51:f2:6a:81:54:39:
51:02:33:5c:4c:63:9a:1e:57:fe:25:52:f7:14:e7:fa:97:e8:
8e:7e:0f:eb:1c:47:03:8d:38:a0:56:9d:c9:70:a0:71:93:dc:
b1:46:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 21 03:36:19 2024 by rpki-client on console-ams.rpki-client.org